{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_ppwakzp48xcs","handle":"mcp-wireshark","url":"https://wellknown.network/agents/mcp-wireshark","links":{"self":"https://wellknown.network/agents/mcp-wireshark/record.json","html":"https://wellknown.network/agents/mcp-wireshark","markdown":"https://wellknown.network/agents/mcp-wireshark/record.md","api":"https://wellknown.network/api/v1/agents/mcp-wireshark","status":"https://wellknown.network/api/v1/agents/mcp-wireshark/status","claim":"https://wellknown.network/agents/mcp-wireshark/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-wireshark/claim.json","badge":"https://wellknown.network/agents/mcp-wireshark/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-wireshark/history","tools":"https://wellknown.network/api/v1/agents/mcp-wireshark/tools"},"ard":{"identifier":"urn:air::server:mcp-wireshark","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-wireshark","summary":"[Unofficial/Community] MCP server for Wireshark/tshark integration with AI tools","description":"# mcp-wireshark\n\n> Community-maintained MCP server for [Wireshark](https://www.wireshark.org/) / `tshark`. Not affiliated with Wireshark or Anthropic.\n> Give your AI assistant direct access to packet captures. Ask Claude to summarize a `.pcap`, follow a TCP stream, filter for a specific protocol, or capture live traffic — all without leaving the chat.\n\n![Claude using mcp-wireshark to analyze a capture](demo/chat.gif)\n\n[![PyPI version](https://badge.fury.io/py/mcp-wireshark.svg)](https://badge.fury.io/py/mcp-wireshark)\n[![CI](https://github.com/khuynh22/mcp-wireshark/actions/workflows/ci.yml/badge.svg)](https://github.com/khuynh22/mcp-wireshark/actions/workflows/ci.yml)\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)\n\n---\n\n## Quick start with Claude Code\n\n```bash\npip install mcp-wireshark\nclaude mcp add --transport stdio --scope user mcp-wireshark -- mcp-wireshark\n```\n\nThat's it. Open Claude Code and try:\n\n> \"Summarize ./capture.pcap and tell me which IPs talked the most.\"\n\n`--scope user` makes the server available across every Claude Code project. Drop the flag to install it for the current project only. See [`claude mcp` docs](https://code.claude.com/docs/en/mcp) for more.\n\n### Verify the install\n\n```bash\nclaude mcp list\n```\n\nYou should see `mcp-wireshark` listed. Inside Claude Code, ask:\n\n> \"Run check_installation.\"\n\nIf `tshark` is on your `PATH`, it returns the version. If not, see [troubleshooting](#troubleshooting).\n\n---\n\n## Tools\n\nThe server exposes 14 tools, split cleanly between **read tools** (safe, no side effects) and **write tools** (capture traffic or write files). Both groups are annotated with the standard MCP `readOnlyHint` so any compliant client can surface the distinction.\n\n### Read tools\n\nSafe to call freely — they only inspect state.\n\n| Tool                 | What it does           …","publisher":{"name":"Khang Nguyen Huynh","url":null},"homepage":"https://github.com/khuynh22/mcp-wireshark#readme","repository":"https://github.com/khuynh22/mcp-wireshark/blob/main/CHANGELOG.md","version":"0.5.0","license":"MIT","protocols":["mcp"],"tags":["mcp","model-context-protocol","wireshark","tshark","network-analysis","packet-capture","pcap","ai-tools","claude","llm"],"pricing":null,"endpoints":[{"url":"pypi:mcp-wireshark","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"dev.filesystem","name":"Filesystem","confidence":0.814,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-wireshark","registry":"pypi","observedAt":"2026-11-03T17:26:00.716Z","publishedAt":"2026-07-08T00:28:50.537389Z","latestVersion":"0.5.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-wireshark","url":"https://pypi.org/project/mcp-wireshark/","firstSeenAt":"2026-09-10T05:22:11.972Z","fetchedAt":"2026-11-03T17:24:35.191Z","normalizedAt":"2026-11-03T17:24:35.191Z"}]},"firstSeenAt":"2026-09-10T05:22:11.972Z","updatedAt":"2026-11-03T17:26:00.716Z"}